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IN THE CLAIMS 

1 . (previously presented) A method of detecting xmauthorized actions with respect to 
content on an optical disk, the optical disk including a read-only portion for pre-recorded 
content and a writeable portion for written content, the method comprising: 

reading an identifier on the optical disk; 

determining whether the identifier was located in the read-only or the writeable 
portion of the media disk; 

determining whether the identifier identifies itself as a pre-recorded identifier or 
as a written identifier; 

and if the identifier identifies itself as a pre-recorded identifier and is located in 
the writeable portion of the media disk, detecting an unauthorized action. 

2. (previously presented) The method of claim 1 wherein the reading of the identifier 
on the optical disk is during a optical disk access operation including one or more of 
record, play, get play key, copy, open, close and create. 

3. (previously presented) The method of claim 2 wherein functionality for the optical 
disk access operation is revoked after detecting the imauthorized action. 



4. (Cancelled) 
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6. (Cancelled) 

7. (Cancelled) 

8. (Cancelled) 

9. (previously presented) The method of claim 1 whereia the identifier is a seed for a 
key generator, the key generator retrieving one or more keys from a key box, the keys for 
one or more of unlocking and decrypting files on the optical disk. 

10. (Cancelled) 

11. (Cancelled) 

12. (Cancelled) 

13. (Cancelled) 

14. (Cancelled) 

15. (previously presented) An apparatus for detecting unauthorized actions with 
respect to encrypted data on a media disk, the media disk including a read-only portion 
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for pre-recorded content and a writeable portion for written content, the apparatus 
comprisixxg: 

means for reading an identifier on the media disk; 

means for determiriing whether the identifier was located in the read-only portion 
or in the writeable portion of the disk; 

means for determining whether the identifier identifies itself as a pre-recorded 
identifier or as a written identifier; 

and means for detecting an unauthorized action if the identifier identifies itself as 
a pre-recorded identifier and is located in the writeable portion of the media disk. 

16. (Cancelled) 

17. (Original) The apparatus of claim 1 5 wherein the means for reading of the 
identifier includes a media disk access component. 

1 8- (Original) The apparatus of claim 1 5 wherein the means for reading the identifier 
operates during an access operation. 

19. (Cancelled) 

20. ^ (Cancelled) 
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2 1 . (previously presented) The apparatus of claim 1 5 wherein the identifier is a seed 
for a cryptographic key box, the key box using the identifier to retrieve one or more keys 
for xmlocking files on the media disk. 

22. (currently amended) An engine configured to detect unauthorized actions with 
respect to encrypted data on a media disk, the media disk including a read-only portion 
for pre-recorded content and a writeable portion for written content, the engine 
comprising: 

a fimiware component located on an application specific integrated circuit 
(ASIC), the firmware component including; 

a block configured to read an identifier on the media disk; 

a block configured to determine whether the identifier was located in the read- 
only portion or the writeable portion of the media disk; 

a block configured to determine whether the identifier identified itself as a pre- 
recorded identifier or as a written identifier; and 

a block configured to detect an unauthorized action if the identifier was located in 
the s e cond writeable portion and identified itself as a pre-recorded identifier. 

23. (Cancelled) 
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